Page 1 of 3

Alternatives to Cisco

Posted: Sat Oct 31, 2015 1:41 pm
by ccordoba24
Hi all,

Are there any alternatives to the cisco firewall boxes? because cisco isnt' getting in here due to import limits.

Although I've blocked several domain words in the tplink router , like youtube and porn, it is rather tedious to do this in every chapel, as well as not being very efficient.

Any advice is appreciated. ;) :ugeek:

Re: Alternatives to Cisco

Posted: Sat Oct 31, 2015 2:02 pm
by russellhltn
I'd contact GSC to see what they suggest. If the church can't put a Cisco in your location, they must have a backup plan.

Support Contact Information for Argentina.

P.S. Thank you for putting your country in your profile. It makes it much easier to find the right stuff for you.

Re: Alternatives to Cisco

Posted: Sat Oct 31, 2015 5:46 pm
by rolandc
Till you get some solid answers, set the DNS in your current router to the churches DNS server that will help some but savvy users will get around it.

8.34.34.91
8.35.35.91

Re: Alternatives to Cisco

Posted: Sat Oct 31, 2015 6:38 pm
by russellhltn
rolandc wrote:but savvy users will get around it.
The next step would be to disable access to all other DNS servers.

Re: Alternatives to Cisco

Posted: Sat Oct 31, 2015 9:12 pm
by ccordoba24
Thanks guys,

I`ll try the DNS option Monday or Tuesday night and I´ve sent an email to GSC.

Hopefully they have already approved another box.

Thanks again!

;) :?

Re: Alternatives to Cisco

Posted: Sat Oct 31, 2015 10:01 pm
by lajackson
charly3358 wrote:Hopefully they have already approved another box.
Your Facilities Management Group should be able to help you, since they are the ones providing the equipment in the first place.

Re: Alternatives to Cisco

Posted: Sun Nov 01, 2015 5:11 am
by rolandc
russellhltn wrote:
rolandc wrote:but savvy users will get around it.
The next step would be to disable access to all other DNS servers.

Can that be forced/enforced on consumer grade routers?

Re: Alternatives to Cisco

Posted: Sun Nov 01, 2015 11:52 am
by russellhltn
rolandc wrote:Can that be forced/enforced on consumer grade routers?
Maybe. It depends on how much control you have over it and if there's a control that could be used to do that.

Re: Alternatives to Cisco

Posted: Mon Nov 02, 2015 1:18 pm
by CleggGP
The Meetinghouse Firewall creates the correct network VLANs for the meetinghouse, and implements firewall rules and filters to protect network users. Russellhltn is correct: Contact the Stake Technology Specialist should contact the Global Service Center for answers (it may be better to call them). Facilities Managers order meetinghouse network equipment (including firewalls). The Stake should work with the FM to get a MH firewall ordered and installed. Equipment delivery time varies depending on the MH location. Until then implementing some of these suggestions may help.

Re: Alternatives to Cisco

Posted: Fri Nov 06, 2015 3:59 pm
by ccordoba24
CleggGP wrote:..........Russellhltn is correct: Contact the Stake Technology Specialist should contact the Global Service Center for answers (it may be better to call them). Facilities Managers order meetinghouse network equipment (including firewalls). The Stake should work with the FM to get a MH firewall ordered and installed. Equipment delivery time varies depending on the MH location. Until then implementing some of these suggestions may help.
Yeah, that´s all fine and true. But the problem we have is that Cisco firewall boxes simply aren't getting through customs due to the various import restriction in place here in the Argentine. Other boxes do get through but they aren´t configured to church standards. We also have issues with getting gaments in by the way, but because of their low cost we end up getting new one every now and then. But then when a chapel looses its remote for the projector, we´re gone because the church ones are fully imported and it is difficult to get other remotes to work with them...

But then for me, as the state tec specialist, I have 5 building with Internet using t-Link modems going directly out via an unfiltered connection. So everyone with a cel phone is on youtube and some people are visiting what are simply banned sites for any organization, not least the church. So then, although I can censor a few words it isn´t practical for all the realities of the web we all know about. Now I´ve tried the DNS option, of having them go through the church ones but the system is then incredibly slow, like 14.4kbps slow! And the ad blocker thinks its malware so I have to disable that to.

I haven´t figured out what the issue is with the church´s DNS, it should work ok, but I´ll have some time tomorrow to take a closer look. Hopefully it will work out.. By the way I did write to the global center but they haven´t answered yet, so I guess calling may be better as suggested ;) :shock: